Skip to content

Latest commit

 

History

History

ecr-credential-provider

Folders and files

NameName
Last commit message
Last commit date

parent directory

..

README.md

README.md

 
 

manifest.yaml

manifest.yaml

 
 

pkg.yaml

pkg.yaml

 
 

vars.yaml

vars.yaml

 
 

README.md

Kubelet ECR Credential Provider extension

This extension provides the ecr-credential-provider binary, which can be executed by Kubelet to provide a short-lived token for pulling container images from Amazon Web Services' Elastic Container Registry (ECR).

Installation

See Installing Extensions.

You also need to configure ecr-credential-provider as a Kubelet image credential provider. For this you'll need patch the machine config with the following:

machine:
  kubelet:
    credentialProviderConfig:
      apiVersion: kubelet.config.k8s.io/v1
      kind: CredentialProviderConfig
      providers:
        - name: ecr-credential-provider
          matchImages:
            - "*.dkr.ecr.*.amazonaws.com"
            - "*.dkr.ecr.*.amazonaws.com.cn"
            - "*.dkr.ecr-fips.*.amazonaws.com"
            - "*.dkr.ecr.us-iso-east-1.c2s.ic.gov"
            - "*.dkr.ecr.us-isob-east-1.sc2s.sgov.gov"
          defaultCacheDuration: "12h"
          apiVersion: credentialprovider.kubelet.k8s.io/v1

More Information